fix: harden terminal-scoped analytics contracts
Keep JSON and bounded CSV exports on one canonical predicate, replace replayable offsets with encrypted tenant/filter-bound keyset cursors, and suppress merchant-grain peers under terminal scope. Validate period filters and align OpenAPI and capability specs with runtime behavior.
This commit is contained in:
@@ -8,5 +8,6 @@ IMPORT_PATH=data/incoming/challenge_data.csv.gz
|
||||
DEMO_USERNAME=merchant-0001
|
||||
DEMO_PASSWORD=replace-with-at-least-12-characters
|
||||
SESSION_SECRET=replace-with-at-least-32-random-characters
|
||||
CURSOR_SECRET=replace-with-a-different-32-character-secret
|
||||
FRONTEND_ORIGIN=http://127.0.0.1:5173
|
||||
COOKIE_SECURE=false
|
||||
|
||||
Reference in New Issue
Block a user